Product by Cap-go

    Capgo.app

    23 known vulnerabilities in Capgo.app (Cap-go), 0 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Capgo.app (Cap-go)
    HighCVE-2026-88861

    Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization

    		8.3
    HighCVE-2026-100622

    capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

    		7.5
    HighCVE-2026-100623

    Capgo Authentication Bypass via Direct PostgREST org_users Table Write

    		8.8
    HighCVE-2026-100619

    Capgo OTA Manifest Poisoning via app_versions.manifest Bypass

    		8.8
    HighCVE-2026-100614

    Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker

    		8.8
    HighCVE-2026-88862

    Capgo API Key Manager Authentication Bypass via x-limited-key-id

    		8.8
    HighCVE-2026-100617

    Cap-go capgo.app Authorization Bypass via channel_permission_overrides

    		8.8
    HighCVE-2026-100615

    Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation

    		8.8
    CriticalCVE-2026-88864

    Capgo SSO Provider Authentication Bypass via PostgREST Direct Write

    		9.1
    HighCVE-2026-88863

    capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org

    		8.1
    HighCVE-2026-100612

    Capgo SSO Provider ID Authentication Bypass via Incomplete Migration

    		7.2
    HighCVE-2026-100625

    Capgo Build Upload Proxy Authorization Bypass via TUS Resource

    		7.1
    CriticalCVE-2026-88860

    Capgo Authorization Bypass via Stale Channel Permission Overrides

    		6.3
    HighCVE-2026-100627

    Capgo bundle promotion API channel RBAC deny override bypass

    		8.1
    HighCVE-2026-100618

    Capgo App Icon Update Privilege Escalation via Service-Role Worker

    		8.5
    HighCVE-2026-100628

    capgo.app before 12.128.12 Authentication Bypass via apikey

    		4.3
    HighCVE-2026-100629

    Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH

    		5.5
    HighCVE-2026-100616

    capgo.app Authentication Bypass via PostgREST customer_id Mutation

    		5.5
    HighCVE-2026-100611

    Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list

    		6.5
    MediumCVE-2026-100613

    capgo.app Authorization Bypass via Stale Channel Permission Overrides

    		5.3
    MediumCVE-2026-100624

    Capgo.app before 12.264.5 Upload Expiry Bypass via build upload

    		5.4
    MediumCVE-2026-100621

    capgo.app Content-Lock Bypass via r2-direct Bundle Mutation

    		4.3
    MediumCVE-2026-100626

    capgo through 12.128.2 IDOR via PUT /app icon endpoint

    		4.3

    All products by Cap-go